This repository has been archived by the owner on Nov 17, 2023. It is now read-only.

There is a vulnerability in guava 24.1-jre,upgrade recommended #1038

Open

QiAnXinCodeSafe opened this issue Jan 19, 2021 · 1 comment

QiAnXinCodeSafe commented Jan 19, 2021

incubator-datalab/services/billing-aws/pom.xml

Lines 132 to 134 in 423fa3a

    
           <groupId>com.google.guava</groupId> 
        
           <artifactId>guava</artifactId> 
        
           <version>24.1-jre</version>

CVE-2018-10237 CVE-2020-8908

Recommended upgrade version：30.0-jre

pjfanning commented Apr 7, 2022

updated in master - https://github.com/apache/incubator-datalab/blob/master/services/billing-aws/pom.xml

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.